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WHAT IS CLAIMED IS : 

1 LA computer implemented method for selecting a' code image during a 

2 reboot routine, comprising: 

3 maintaining multiple code images in a memory devi<j 

4 executing a first operation routine; 

5 incrementing a first counter if the first operation routine succeeds; 

6 executing a second operation routine; 

7 incrementing a second counter if the second operation routine succeeds; and 

8 using the first and second counters to select one of the code images from the 

9 memory device to execute. 

D 

1 2. The method of claim 1 , further comprising: 

'•V J / 

yi 2 designating one code image as non-operattonal if the first counter is a first value 

3 and the second counter is a second value, whergfn one other code image not designated as 

4 non-operational is selected to execute. 

2 

O 1 3. The method of claim 2, wherein the first value is greater than zero and the 

H 2 second value is zero. 

Ul 

□ 

h~ 1 4. The method of claim 2,^urther comprising: 

2 receiving an update to the code image; 

3 determining whether one code image is designated as non-operational; and 

4 overwriting the code imago designated as non-operational with the received 

5 update to the code image if one code image is designated as non-operational. 

1 5. The method of jflaim 4, further comprising: 

2 determining an earliest version of the code images in the memory device; and 
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3 overwriting the determined earliest version of the cofle image if one code image is 

4 not designated as non-operational. 



y 1 6. The method of claim 4, further comprising: 

2 determining whether one code image is corrup/ted; and 



3 if one code image is corrupted, overwriting the corrupted code image with the 

4 received update before determining whether one code is non-operational. 

1 7. The method of claim 1 , wherein /he first operation routine comprises a 

2 reboot routine and the second operation routine comprises an initialization routine. 

1 8. The method of claim 7, furtl/er comprising: 



2 incrementing the second counter if the initialization routine successfully 

Ul 

pj 3 completed; 



4 rebooting if the initialization routine failed; and 

5 performing another iteration of all previous steps after rebooting. 



1 9. The method of claim 7, further comprising: 

m / 

p 2 selecting one copy of the/code image, wherein the executed initialization routine 

3 is a component of the selected code image, wherein the selected code image is designated 

4 as non-operational if the first jtounter is the first value and the second counter is the 

5 second value; and 

6 selecting one other ^opy of the code image if the selected code image is 

7 designated as non-operational. 

1 10. The metjlod of claim 1 , wherein the code image comprise different 

2 versions of the code image. 
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1 1 . The method of claim 1 , wherein the first operation routine comprises a 
reboot routine and the second operation routine comprises <fn initialization routine, and 
wherein the code images include a function routine to perform an operation after 
initialization, further comprising: / 

executing the function routine in one code ima/ge; 

incrementing a third counter associated witr/the code image including the 
executed function routine if the function routine succeeded; and 

using the third counter, in addition to th/ first and second counters, to select one 
of the multiple copies of the code image frorn/he memory device to execute. 

12. The method of claim 1 1 , rarther comprising: 

designating one code image as operational if the first, second, and third counters 
satisfy at least one threshold value, wjferein the code image designated as operational is 
automatically selected from the memory device to execute after subsequent reboot 
operations. / 

1 3 . The method of / laim 1 1 , further comprising; 

designating one code/mage as non-operational if the first, second, and third 
counters satisfy at least one/threshold value, wherein one other code image not designated 
as non-operational is selected from the memory device and executed. 

14. The method of claim 13, wherein the threshold value for the third counter 
is zero and wherein/the at least one threshold value for the first and second counters is 
greater than zero / 



15. 
increi 



fThe method of claim 13, further comprising: 

lenting the second counter if the initialization routine successfully 
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rebooting if the initialization or function routin/ failed; and 
performing another iteration of all previous steps after rebooting. 

1 6. The method of claim 1 1 , wherein the code image includes multiple 
function routines, wherein there is one counter for each of the multiple function routines, 
and further comprising: / 

designating one code image as operational if the first counter, second counter, and 
each counter associated with a function routine satisfy at least one threshold value, 
wherein the code image designated as operational is automatically selected from the 
memory device to execute after subsequent reboot operations. 

1 7. The method of claim /, wherein one operation routine comprises one of a 
reboot routine, an initialization routine or a function routine to perform a device specific 
operation. / 

18. A computer system for selecting a code image during a reboot routine, 
comprising: / 

a processor; . / 

a memory device Maintaining multiple code images, wherein the processor is 
capable of accessing them memory device; 

program logic executed by the processor, wherein the program logic causes the 
processor to perform:/ 

(i) executing a first operation routine; 

(ii) incrementing a first counter if the first operation routine succeeds; 
executing a second operation routine; 

(mi) incrementing a second counter if the second operation routine 
succeeds; and 
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1 3 (iv) using the first and second counters to select one of the code images 

14 from the memory device to execute. / 

1 19. The system of claim 1 8, wherein the rirogram logic is further capable of 

2 causing the processor to perform: / 

3 designating one code image as non-operational if the first counter is a first value 

4 and the second counter is a second value, wherein one other code image not designated as 

5 non-operational is selected to execute. / 

1 20. The system of claim 1 9, whetein the first value is greater than zero and the 

2 second value is zero. / 

1 21. The system of claim 1 9, therein the program logic is further capable of 

2 causing the processor to perform: / 

3 receiving an update to the code image; 

4 determining whether one coax image is designated as non-operational; and 

5 overwriting the code image designated as non-operational with the received 

6 update to the code image if one code image is designated as non-operational. 

1 22. The system of claim 2 1 , wherein the program logic is further capable of 

2 causing the processor to perform: 

3 determining an earliesy version of the code images in the memory device; and 

4 overwriting the determined earliest version of the code image if one code image is 

5 not designated as non-opera/ional. 

1 23 . The sy stent of claim 2 1 , wherein the program logic is further capable of 

2 causing the processor to perform: 

3 determining whsther one code image is corrupted; and 
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if one code image is corrupted, overwriting the corrupted code image with the 
received update before determining whether one code is non-operational. 

24. The system of claim 1 8, wherein the fir/t operation routine comprises a 
reboot routine and the second operation routine comprises an initialization routine. 

25. The system of claim 24, wherein the program logic is further capable of 
causing the processor to perform: / 

incrementing the second counter if the initialization routine successfully 
completed; / 

rebooting if the initialization routinetfailed; and 

performing another iteration of all previous steps after rebooting. 

26. The system of claim 24, wherein the program logic is further capable of 
causing the processor to perform: / 

selecting one copy of the code image, wherein the executed initialization routine 
is a component of the selected code image, wherein the selected code image is designated 
as non-operational if the first counter is the first value and the second counter is the 
second value; and / 

selecting one other copy of the code image if the selected code image is 
designated as non-operational/ 

27. The system of claim 1 8, wherein the code image comprise different 
versions of the code image. 

28. The system of claim 1 8, wherein the first operation routine comprises a 
reboot routine and the /econd operation routine comprises an initialization routine, and 
wherein the code images include a function routine to perform an operation after 
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4 initialization, wherein the program logic is further capablei>f causing the processor to 

5 perform: / 

6 executing the function routine in one code image; 

7 incrementing a third counter associated with th/e code image including the 

8 executed function routine if the function routine suc/eeded; and 

9 using the third counter, in addition to the fi/st and second counters, to select one 
10 of the multiple copies of the code image to from me memory device to execute. 

1 29. The system of claim 28, wherein the program logic is further capable of 

2 causing the processor to perform: / 

3 designating one code image as operational if the first, second, and third counters 

4 satisfy at least one threshold value, wherein the code image designated as operational is 

5 automatically selected from the memory device to execute after subsequent reboot 

6 operations. / 

1 30. The system of claim 28/ wherein the program logic is further capable of 

2 causing the processor to perform: / 

3 designating one code image as non-operational if the first, second, and third 

4 counters satisfy at least one threshold value, wherein one other code image not designated 

5 as non-operational is selected frorrf the memory device and executed. 

1 31. The system of claim 30, wherein the threshold value for the third counter 

2 is zero and wherein the at least one threshold value for the first and second counters is 

3 greater than zero / 

1 32. The system of claim 30, wherein the program logic is further capable of 

2 causing the processor to pe/form: 
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3 incrementing the second counter if the initialization routine successfully 

4 completed; / 

5 rebooting if the initialization or function routine failed; and 

6 performing another iteration of all previous steps after rebooting. 

1 33. The system of claim 28, wherein tfyfc code image includes multiple 

2 function routines, wherein there is one counter for each of the multiple function routines, 

3 and further comprising: / 

4 designating one code image as operational if the first counter, second counter, and 

5 each counter associated with a function routine satisfy at least one threshold value, 

6 wherein the code image designated as operational is automatically selected from the 

7 memory device to execute after subsequent reboot operations. 

1 34. The system of claim 1 S7 wherein one operation routine comprises one of a 

2 reboot routine, an initialization routine or a function routine to perform a device specific 

3 operation. / 

1 35. An article of manufacture for selecting a code image during a reboot 

2 routine, wherein the article of rrfanufacture includes code in a computer readable medium 

3 capable of causing a processor to perform: 

4 maintaining multiple/code images; 

5 executing a first operation routine; 

6 incrementing a first counter if the first operation routine succeeds; 

7 executing a second operation routine; 

8 incrementing a second counter if the second operation routine succeeds; and 

9 using the first afid second counters to select one of the code images to execute. 
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1 36. The article of manufacture of claim 35, whefein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 designating one code image as non-operational if the first counter is a first value 

4 and the second counter is a second value, wherein one 6ther code image not designated as 

5 non-operational is selected to execute. / 

1 37. The article of manufacture of clainy36, wherein the first value is greater 

2 than zero and the second value is zero. / 

1 38. The article of manufacture of cflaim 36, wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 receiving an update to the code image; 

4 determining whether one code imige is designated as non-operational; and 

5 overwriting the code image designated as non-operational with the received 

6 update to the code image if one code image is designated as non-operational. 

1 39. The article of manufacture of claim 3 8, wherein the article of manufacture 

2 code is further capable of causing t/ne processor to perform: 

3 determining an earliest version of the code images; and 

4 overwriting the determined earliest version of the code image if one code image is 

5 not designated as non-operational. 

1 40. The article off manufacture of claim 38, wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 determining whetner one code image is corrupted; and 

4 if one code imaae is corrupted, overwriting the corrupted code image with the 

5 received update beforejaetermining whether one code is non-operational. 
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1 41. The article of manufacture of claim 35, wherfein the first operation routine 

2 comprises a reboot routine and the second operation routine comprises an initialization 

3 routine. / 

1 42 . The article of manufacture of claim 4 1 /wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 incrementing the second counter if the initialization routine successfully 

4 completed; / 

5 rebooting if the initialization routine failed; and 

6 performing another iteration of all previous steps after rebooting. 

1 43 . The article of manufacture of daim 4 1 , wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 selecting one copy of the code image, wherein the executed initialization routine 

4 is a component of the selected code image, wherein the selected code image is designated 

5 as non-operational if the first counter is tine first value and the second counter is the 

6 second value; and / 

7 selecting one other copy of the/code image if the selected code image is 

8 designated as non-operational. / 

1 44. The article of manufacture of claim 35, wherein the code image comprise 

2 different versions of the code imAge. 

1 45. The article of Manufacture of claim 35, wherein the first operation routine 

2 comprises a reboot routine aild the second operation routine comprises an initialization 

3 routine, and wherein the code images include a function routine to perform an operation 

4 after initialization, wherem the article of manufacture code is further capable of causing 

5 the processor to perform/ 
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6 executing the function routine in one code image 

7 incrementing a third counter associated with the/ code image including the 

8 executed function routine if the function routine succeeded; and 

9 using the third counter, in addition to the firs/ and second counters, to select one 
10 of the multiple copies of the code image to executed 

1 46. The article of manufacture of claijn 45, wherein the article of manufacture 

2 code is further capable of causing the processor™ perform: 

3 designating one code image as operational if the first, second, and third counters 

4 satisfy at least one threshold value, wherein tl/e code image designated as operational is 
□ 5 automatically selected to execute after subsequent reboot operations. 




1 47. The article of manufacture ybf claim 45, wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 designating one code image as iion-operational if the first, second, and third 

4 counters satisfy at least one threshold value, wherein one other code image not designated 

5 as non-operational is selected and executed. 



HI 
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1 48. The article of manufacture of claim 47, wherein the threshold value for the 

2 third counter is zero and wherein J!ne at least one threshold value for the first and second 

3 counters is greater than zero 

1 49. The article of manufacture of claim 47, wherein the article of manufacture 

2 code is further capable of causing the processor to perform: 

3 incrementing the second counter if the initialization routine successfully 

4 completed; 

5 rebooting if the initialization or function routine failed; and 

6 performing another iteration of all previous steps after rebooting. 
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50. The article of manufacture of cWim 45, wherein the code image includes 
multiple function routines, wherein there is one counter for each of the multiple function 
routines, wherein the article of manufacture/code is further capable of causing the 
processor to perform: / 

designating one code image as operational if the first counter, second counter, and 
each counter associated with a function routine satisfy at least one threshold value, 
wherein the code image designatea\as operational is automatically selected to execute 
after subsequent reboot operations. 

5 1 . The article of ^manufacture of claim 35, wherein one operation routine 
comprises one of a reboot routine, an initialization routine or a function routine to 
perform a device specific/operation. 




